Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/hG2neDrcv1LF4A0Khg1dAE3RoMA.roa
File: hG2neDrcv1LF4A0Khg1dAE3RoMA.roa (raw, json)
Hash identifier: IGi/Jv4BfTEx8U1u+dKYyQVZ7p4QCIlyaULHo14LJN4=
Subject key identifier: 84:6D:A7:78:3A:DC:BF:52:C5:E0:0D:0A:86:0D:5D:00:4D:D1:A0:C0
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 11C4
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/hG2neDrcv1LF4A0Khg1dAE3RoMA.roa
Signing time: Mon 10 Feb 2025 14:26:59 +0000
ROA not before: Mon 10 Feb 2025 14:26:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131633
IP address blocks: 2404:2a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Feb 10 14:26:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=846DA7783ADCBF52C5E00D0A860D5D004DD1A0C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:cd:17:f4:0d:d6:72:dc:c4:6b:26:21:2e:
b8:b5:8e:5c:12:f6:cc:61:d2:ef:4d:a2:8f:63:e1:
f9:f0:90:d1:9e:8e:56:a7:17:77:fa:48:8e:d4:03:
c5:d4:ec:db:8e:f8:9f:f2:a7:10:a1:62:3b:c3:8a:
77:a2:e0:ab:30:15:ee:f2:7f:c5:c7:1e:07:07:38:
1e:91:3b:d9:c8:14:ef:04:68:cc:52:11:5c:2d:dc:
46:a8:44:9a:61:41:d9:cc:ec:6f:69:59:bd:59:b3:
04:27:fc:da:dd:08:c0:1e:ed:29:59:9b:4a:74:ee:
b5:9c:f1:bd:61:ab:ca:7a:e2:6c:c8:01:40:77:a3:
4f:b5:fc:3e:e0:f9:fc:c1:4c:b4:cc:5c:d9:05:6a:
d4:73:56:93:13:c2:3a:14:69:70:6c:b0:6f:11:0e:
30:4c:16:32:df:59:a3:a1:b6:f4:d2:a1:d4:f7:0a:
dc:c0:e1:e0:ee:d9:b7:6d:29:cb:d0:82:c0:71:b8:
e7:5a:96:5a:d6:14:e2:25:57:b9:f6:85:90:cb:22:
89:a2:58:a6:de:07:ee:9e:78:2f:01:0c:d1:58:42:
7a:31:4f:70:14:5b:7b:96:ed:cd:70:fd:43:7b:0d:
43:7c:5a:15:50:27:83:4a:30:d3:91:66:97:81:d8:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6D:A7:78:3A:DC:BF:52:C5:E0:0D:0A:86:0D:5D:00:4D:D1:A0:C0
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/hG2neDrcv1LF4A0Khg1dAE3RoMA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
3c:1e:b5:75:ec:8f:b0:1d:1f:f8:f4:0c:1a:ab:d4:b3:5f:a5:
dd:98:e6:87:de:26:89:dd:ce:aa:5b:db:72:e3:e2:11:c0:45:
77:a8:91:3f:73:40:55:0d:92:15:17:7a:ee:37:5b:84:ae:ee:
b6:02:c8:9e:50:b3:c2:06:72:2f:03:2f:cb:92:bc:15:12:27:
64:38:e2:9c:1e:4c:05:c0:72:d3:2c:f7:08:4b:e9:4b:f8:c3:
ec:18:92:52:9f:23:a1:18:32:cf:ce:24:b4:25:ac:05:d2:9a:
94:a5:68:e7:78:4c:d5:34:5c:9f:1a:7b:3c:fa:33:c7:db:24:
9f:b8:74:00:cd:f7:8f:5d:eb:55:ed:6c:39:00:cc:65:f4:21:
17:57:69:b8:b4:94:4e:c8:bb:1a:59:0e:f0:d3:0d:c4:18:ec:
df:47:5e:5e:b1:ff:6c:cf:08:91:0b:b8:9f:dc:5c:be:88:11:
8f:ac:a5:b7:d7:67:f1:54:ee:ab:c6:a0:89:87:8a:dd:dc:12:
6a:4f:79:3a:97:d3:bc:6c:8a:73:fb:67:31:e6:f3:eb:b1:b7:
37:55:22:22:45:53:e4:6b:11:81:8b:17:25:a8:41:3a:1a:88:
7c:1e:25:44:25:d1:fc:81:de:52:ed:bb:85:aa:a5:a5:45:45:
5c:6d:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:51:45 2025 by rpki-client